In the Claims : 

Please amend the claims as indicated below. 

1. (Currently amended) A method of accepting a pass code, comprising: 
providing a user with a machine-generated challenge; and 

receiving, from a user-input device, user input that transforms the machine- 
generated challenge into a pass code allocated to the user, wherein the user 
input is dependent on the machine-generated challenge such that the user 
input to transform the machine-generated challenge into the pass code is 
different for different machine-generated challenges; 

generating receiving a response to the challenge from the user input received from 
the user input device , whoroin said response roprosonts a transformation 
from th e challenge to a pass code allocat e d to th e user, said response 
allowing the user to be validated against a stored data record of the pass 
code. 

2. (Original) The method of claim 1, wherein said challenge is independent of 
said pass code. 

3. (Original) The method of claim 1, further comprising generating a new 
challenge for each user validation. 

4. (Original) The method of claim 3, wherein said challenge is generated on a 
random basis. 

5. (Original) The method of claim 3, wherein the challenge is generated in 
response to receiving a request from a user for validation. 
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6. (Original) The method of claim 1, wherein providing a user with a challenge 
comprises displaying the challenge to the user. 

7. (Original) The method of claim 6, wherein the challenge is displayed to the 
user in such a manner as to prevent third parties from viewing the challenge. 

8. (Currently amended) The method of claim 1, wherein the response user input 
from the user -input device is received as a set of one or more modifications to be applied 
to the challenge so that it matches the pass code allocated to the user. 

9. (Original) The method of claim 8, wherein said set of one or more 
modifications is received as directional input from the user. 

10. (Original) The method of claim 9, wherein said directional input is received 
as the result of the user pressing one or more arrow keys that increment or decrement the 
challenge by a fixed amount. 

1 1 . (Original) The method of claim 1, wherein said challenge has the same 
number of characters as the pass code allocated to the user. 

12. (Original) The method of claim 11, wherein said transformation is specified 
individually for each character of the challenge. 

13. (Original) The method of claim 12, further comprising receiving an indication 
from the user that the transformation for a different character is about to be entered. 

14. (Currently amended) The method of claim 1, further comprising receiving an 
indication from the user that the response - user input to transform the challenge has been 
completely entered. 



10 773.069 (5681-74900 SUN030311) 



3 



Meyertons, Hood, Kivlin, Kowert & Goetzel., P.C. 



15. (Currently amended) The method of claim 1, further comprising generating 
an entered the pass code from the challenge and from the response user input from the 
use r-input device . 

16. (Currently amended) The method of claim 15, wherein the response is 
validated by comparing the entered pass code with the stored data record of the pass 
code. 

17. (Currently amended) The method of claim 1, further comprising: 

receiving a communications challenge from an authorisation unit that has access 
to said stored data record of the pass code; 

using the response to encrypt said communications challenge; and 

transmitting the encrypted communications challenge to the authorisation unit, 
thereby allowing the response input by th e us e r to be validated by said 
authorisation unit against said stored data record of the pass code. 

18. (Currently amended) A terminal for use in accepting a pass code, 
comprising: 

an output for providing a user with a machine-generated challenge; and 

a user-input device for receiving user input that transforms the machine- generated 
challenge into a pass code allocated to the user, wherein the user input is 
dependent on the machine-generated challenge such that the user input to 
transform the machine-generated challenge into the pass code is different 
for different machine-generated challenges. 
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input for receiving a response from the user, wherein said response represents a 
transformation from the challenge to a pass code allocated to the user, said 
response allowing the user to bo validated against a stored data record of 
the pass code . 



19. (Original) The terminal of claim 18, wherein said challenge is independent of 
said pass code. 

20. (Original) The terminal of claim 18, wherein a new challenge is generated for 
each user validation. 

21. (Original) The terminal of claim 20, wherein said challenge is generated on a 
random basis. 

22. (Original) The terminal of claim 20, wherein the challenge is generated in 
response to receiving a request from a user for validation. 

23. (Original) The terminal of claim 18, further comprising a display, wherein the 
challenge is provided to the user on the display. 

24. (Original) The terminal of claim 23, wherein the terminal is configured to 
prevent parties other than the user from viewing the challenge on the display. 

25. (Currently amended) The terminal of claim 18, wherein the response user 
input from the use r-input device is received as a set of one or more modifications to be 
applied to the challenge so that it matches the pass code allocated to the user. 

26. (Original) The terminal of claim 25, wherein said set of one or more 
modifications is received as directional input from the user. 
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27. (Currently amended) The terminal of claim 26, further comprising wherein 
the user-input device comprises one or more arrow keys that increment or decrement the 
challenge by a fixed amount. 

28. (Original) The terminal of claim 18, wherein said challenge has the same 
number of characters as the pass code allocated to the user. 

29. (Original) The terminal of claim 28, wherein said transformation is specified 
individually for each character of the challenge. 

30. (Currently amended) The terminal of claim 29, further comprising wherein 
the user-input device comprises a key for receiving an indication from the user that the 
transformation for a different character is about to be entered. 

31. (Currently amended) The terminal of claim 18, further comprising wherein 
the user-input device comprises a key for receiving an indication from the user that the 
r e sponse user input to transform the challenge has been completely entered. 

32. (Currently amended) The terminal of claim 18, wherein the an entered pass 
code is generated from the challenge and from the response user input from the use r-input 
device . 

33. (Currently amended) The terminal of claim 32, wherein the user response is 
validated by comparing the generated entered pass code with the a stored data record of 
the pass code. 

34. (Currently amended) The terminal of claim 18, further comprising a 
communications link with an authorisation unit that has access to a said stored data 
record of the pass code, wherein the terminal receives a communications challenge from 
said authorisation unit and uses the a response generated from the user input to encrypt 
said communications challenge, and wherein the encrypted communications challenge is 
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transmitted to the authorisation unit, thereby allowing the response input by the user to be 
validated by said authorisation unit against said stored data record of the pass code. 

35. (Currently amended) A n apparatus moans for accepting a pass code , 
comprising: 

means for providing a user with a machine-generated challenge; and 

means for receiving user input that transforms the machine-generated challenge 
into a pass code allocated to the user, wherein the user input is dependent 
on the machine-generated challenge such that the user input to transform 
the machine- generated challenge into the pass code is different for 
different machine-generated challenges. 

moans for receiving a response from tho usor, whoroin said response represents a 
transformation from the challenge to a pass codo allocated to tho user, said 
r e spons e allowing the user to be validated against a stored data r e cord of 
th e pass cod e . 

36. (Currently amended) A method for using a pass code to validate a user, 
comprising: 

receiving a request from a user for validation; 

generating a challenge in response to said request; 

providing the user with the challenge; 

receiving, from a user-input device, user input that transforms the challenge into a 
pass code allocated to the user, wherein the user input is dependent on the 
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challenge such that the user input to transform the challenge into the pass 
code is different for different challenges; 

generating a response to the challenge from the user input received from the user 
input device; and 

receiving a response from the user, wherein said response represents a 
transformation from the challenge to the pass code; and 

validating the user on the basis of said response against a stored version of the 
pass code. 

37. (Canceled) 

38. (Currently amended) A computer program product comprising instructions 
encoded on a storage medium, said instructions when loaded into a machine causing the 
machine: 

to provide a user with a machine-generated challenge; and 

receive, from a user-input device, user input that transforms the machine- 
generated challenge into a pass code allocated to the user, wherein the user 
input is dependent on the machine-generated challenge such that the user 
input to transform the machine-generated challenge into the pass code is 
different for different machine-generated challenges. 

to receive as input a response from the user, wherein said response represents a 
transformation from the challenge to a pass code allocated to the user, said 
response allowing the user to bo validated against a stored data record of 
the pass code. 
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39. (Original) The computer program product of claim 38, wherein said challenge 
is independent of said pass code. 

40. (Original) The computer program product of claim 38, wherein said 
instructions further cause the machine to generate a new challenge for each user 
validation. 

41. (Original) The computer program product of claim 40, wherein the challenge 
is generated in response to receiving a request from a user for validation. 

42. (Original) The of computer program product of claim 40, wherein said 
challenge is generated on a random basis. 

43. (Original) The computer program product of claim 38, wherein providing a 
user with a challenge comprises displaying the challenge to the user. 

44. (Original) The computer program product of claim 43, wherein the challenge 
is displayed to the user in such a manner as to prevent third parties from viewing the 
challenge. 

45. (Currently amended) The computer program product of claim 38, wherein 
the response user input from the use r-input device is received as a set of one or more 
modifications to be applied to the challenge so that it matches the pass code allocated to 
the user. 

46. (Original) The computer program product of claim 45, wherein said set of 
one or more modifications is received as directional input from the user. 

47. (Original) The computer program product of claim 46, wherein said 
directional input is received as the result of the user pressing one or more arrow keys that 
increment or decrement the challenge by a fixed amount. 
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48. (Original) The computer program product of claim 38, wherein said challenge 
has the same number of characters as the pass code allocated to the user. 

49. (Original) The computer program product of claim 48, wherein said 
transformation is specified individually for each character of the challenge. 

50. (Currently amended) The computer program product of claim 49, wherein 
said instructions further cause the machine to receive an indication from the use r-input 
device that the transformation for a different character is about to be entered. 

51. (Currently amended) The computer program product of claim 38, wherein 
said instructions further cause the machine to receive an indication from the user that the 
response user input to transform the challenge has been completely entered. 

52. (Currently amended) The computer program product of claim 38, wherein 
said instructions further cause the machine to generate an entered the pass code from the 
challenge and from the response user input from the user -input device . 

53. (Currently amended) The computer program product of claim 52, wherein 
the response user is validated by comparing the generated entered pass code with a the 
stored data record of the pass code. 

54. (Currently amended) The computer program product of claim 38, wherein 
the instructions further cause the machine: 

to receive a communications challenge from an authorisation unit that has access 
to a said stored data record of the pass code; 

to use the a response generated from the user input to encrypt said 
communications challenge; and 
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to transmit the encrypted communications challenge to the authorisation unit, 
thereby allowing the response input by the user to be validated by said 
authorisation unit against said stored data record of the pass code. 
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